@adaptive-ds/project-registry 0.2.3

package/dist/zitadel/zitadelDiscoveryFetch.js

@@ -0,0 +1,55 @@
+import { createResult, createResultError } from "#result";
+import { zitadelConfigValidate } from "./zitadelConfigValidate.js";
+import { zitadelDiscoveryValidate } from "./zitadelDiscoveryValidate.js";
+import { zitadelHttpJsonFetch } from "./zitadelHttpJsonFetch.js";
+export async function zitadelDiscoveryFetch(config, http, options = {}) {
+    const op = "zitadelDiscoveryFetch";
+    if (typeof http !== "function")
+        return createResultError(op, "Zitadel discovery is unavailable");
+    const configR = zitadelConfigValidate(config);
+    if (!configR.success)
+        return createResultError(op, "Zitadel discovery is invalid");
+    const validConfig = configR.data;
+    try {
+        const issuer = new URL(validConfig.issuer);
+        if (issuer.protocol !== "https:" ||
+            issuer.username.length > 0 ||
+            issuer.password.length > 0 ||
+            issuer.hash.length > 0 ||
+            issuer.search.length > 0 ||
+            issuer.pathname !== "/" ||
+            issuer.origin !== validConfig.issuer) {
+            return createResultError(op, "Zitadel discovery is invalid");
+        }
+    }
+    catch {
+        return createResultError(op, "Zitadel discovery is invalid");
+    }
+    const url = `${validConfig.issuer}/.well-known/openid-configuration`;
+    try {
+        const responseR = await zitadelHttpJsonFetch(http, url, { method: "GET", headers: { accept: "application/json" } }, options);
+        if (!responseR.success)
+            return createResultError(op, "Zitadel discovery is unavailable");
+        if (!responseR.data.response.ok)
+            return createResultError(op, "Zitadel discovery is unavailable");
+        const body = responseR.data.body;
+        if (typeof body !== "object" || body === null || Array.isArray(body)) {
+            return createResultError(op, "Zitadel discovery is invalid");
+        }
+        const values = body;
+        const discoveryR = zitadelDiscoveryValidate({
+            issuer: values.issuer,
+            authorizationEndpoint: values.authorization_endpoint,
+            tokenEndpoint: values.token_endpoint,
+            jwksUri: values.jwks_uri,
+        });
+        if (!discoveryR.success || discoveryR.data.issuer !== validConfig.issuer) {
+            return createResultError(op, "Zitadel discovery is invalid");
+        }
+        return createResult(discoveryR.data);
+    }
+    catch {
+        return createResultError(op, "Zitadel discovery is unavailable");
+    }
+}
+//# sourceMappingURL=zitadelDiscoveryFetch.js.map

package/dist/zitadel/zitadelDiscoveryFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelDiscoveryFetch.js","sourceRoot":"","sources":["../../src/zitadel/zitadelDiscoveryFetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAK7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAEhE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAyB,EACzB,IAAiB,EACjB,UAA8B,EAAE;IAEhC,MAAM,EAAE,GAAG,uBAAuB,CAAA;IAClC,IAAI,OAAO,IAAI,KAAK,UAAU;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAA;IAChG,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;IAC7C,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAClF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAC1C,IACE,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC5B,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YACtB,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACxB,MAAM,CAAC,QAAQ,KAAK,GAAG;YACvB,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EACpC,CAAC;YACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC,MAAM,mCAAmC,CAAA;IACpE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAC1C,IAAI,EACJ,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAC1D,OAAO,CACR,CAAA;QACD,IAAI,CAAC,SAAS,CAAC,OAAO;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAA;QACxF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAA;QACjG,MAAM,IAAI,GAAY,SAAS,CAAC,IAAI,CAAC,IAAI,CAAA;QACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,IAA+B,CAAA;QAC9C,MAAM,UAAU,GAAG,wBAAwB,CAAC;YAC1C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,qBAAqB,EAAE,MAAM,CAAC,sBAAsB;YACpD,aAAa,EAAE,MAAM,CAAC,cAAc;YACpC,OAAO,EAAE,MAAM,CAAC,QAAQ;SACzB,CAAC,CAAA;QACF,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;YACzE,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAC9D,CAAC;QACD,OAAO,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAA;IAClE,CAAC;AACH,CAAC"}

package/dist/zitadel/zitadelDiscoveryValidate.d.ts

@@ -0,0 +1,4 @@
+import { type Result } from "#result";
+import type { ZitadelDiscoveryDocument } from "./ZitadelDiscoveryDocument.js";
+export declare function zitadelDiscoveryValidate(value: unknown): Result<ZitadelDiscoveryDocument>;
+//# sourceMappingURL=zitadelDiscoveryValidate.d.ts.map

package/dist/zitadel/zitadelDiscoveryValidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelDiscoveryValidate.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelDiscoveryValidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AACtE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAsB7E,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAoBzF"}

package/dist/zitadel/zitadelDiscoveryValidate.js

@@ -0,0 +1,43 @@
+import { createResult, createResultError } from "#result";
+function endpointIsValid(value) {
+    if (typeof value !== "string" || value.length === 0 || value.length > 2048)
+        return false;
+    try {
+        const url = new URL(value);
+        return url.protocol === "https:" && url.username.length === 0 && url.password.length === 0 && url.hash.length === 0;
+    }
+    catch {
+        return false;
+    }
+}
+function issuerIsValid(value) {
+    if (!endpointIsValid(value))
+        return false;
+    try {
+        const url = new URL(value);
+        return url.pathname === "/" && url.search.length === 0 && url.origin === value;
+    }
+    catch {
+        return false;
+    }
+}
+export function zitadelDiscoveryValidate(value) {
+    const op = "zitadelDiscoveryValidate";
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return createResultError(op, "Zitadel discovery is invalid");
+    }
+    const values = value;
+    if (!issuerIsValid(values.issuer) ||
+        !endpointIsValid(values.authorizationEndpoint) ||
+        !endpointIsValid(values.tokenEndpoint) ||
+        !endpointIsValid(values.jwksUri)) {
+        return createResultError(op, "Zitadel discovery is invalid");
+    }
+    return createResult({
+        issuer: values.issuer,
+        authorizationEndpoint: values.authorizationEndpoint,
+        tokenEndpoint: values.tokenEndpoint,
+        jwksUri: values.jwksUri,
+    });
+}
+//# sourceMappingURL=zitadelDiscoveryValidate.js.map

package/dist/zitadel/zitadelDiscoveryValidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelDiscoveryValidate.js","sourceRoot":"","sources":["../../src/zitadel/zitadelDiscoveryValidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAe,MAAM,SAAS,CAAA;AAGtE,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAA;IACxF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAA;IACrH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1B,OAAO,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAA;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,MAAM,EAAE,GAAG,0BAA0B,CAAA;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,IACE,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,CAAC,eAAe,CAAC,MAAM,CAAC,qBAAqB,CAAC;QAC9C,CAAC,eAAe,CAAC,MAAM,CAAC,aAAa,CAAC;QACtC,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAChC,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,YAAY,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAA;AACJ,CAAC"}

package/dist/zitadel/zitadelHttpJsonFetch.d.ts

@@ -0,0 +1,8 @@
+import { type PromiseResult } from "#result";
+import type { ZitadelHttp } from "./ZitadelHttp.js";
+import type { ZitadelHttpOptions } from "./ZitadelHttpOptions.js";
+export declare function zitadelHttpJsonFetch(http: ZitadelHttp, input: string, init: RequestInit, options?: ZitadelHttpOptions): PromiseResult<{
+    response: Response;
+    body: unknown;
+}>;
+//# sourceMappingURL=zitadelHttpJsonFetch.d.ts.map

package/dist/zitadel/zitadelHttpJsonFetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelHttpJsonFetch.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelHttpJsonFetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAE7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AA2DjE,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EACjB,OAAO,GAAE,kBAAuB,GAC/B,aAAa,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CA4CtD"}

package/dist/zitadel/zitadelHttpJsonFetch.js

@@ -0,0 +1,118 @@
+import { createResult, createResultError } from "#result";
+import { promiseBoundedRace } from "../runtime/promiseBoundedRace.js";
+const defaultBodyBytes = 1_048_576;
+const maximumBodyBytes = 8_388_608;
+function bodyBytesIsValid(value) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value >= 1 && value <= maximumBodyBytes;
+}
+function responseIsValid(value) {
+    return typeof value === "object" && value !== null && typeof value.ok === "boolean";
+}
+function contentLengthResolve(response, maxBodyBytes) {
+    try {
+        const contentLength = response.headers?.get("content-length");
+        if (contentLength === null || contentLength === undefined || contentLength === "")
+            return true;
+        if (!/^\d+$/.test(contentLength))
+            return false;
+        const length = Number(contentLength);
+        return Number.isSafeInteger(length) && length <= maxBodyBytes;
+    }
+    catch {
+        return false;
+    }
+}
+async function responseBodyRead(response, maxBodyBytes) {
+    if (!contentLengthResolve(response, maxBodyBytes))
+        throw new Error("response body is too large");
+    if (response.body !== null && response.body !== undefined) {
+        const reader = response.body.getReader();
+        const chunks = [];
+        let size = 0;
+        try {
+            while (true) {
+                const part = await reader.read();
+                if (part.done)
+                    break;
+                if (!(part.value instanceof Uint8Array))
+                    throw new Error("response body is invalid");
+                size += part.value.byteLength;
+                if (!Number.isSafeInteger(size) || size > maxBodyBytes)
+                    throw new Error("response body is too large");
+                chunks.push(part.value);
+            }
+        }
+        finally {
+            if (size > maxBodyBytes)
+                await reader.cancel().catch(() => undefined);
+        }
+        const bytes = new Uint8Array(size);
+        let offset = 0;
+        for (const chunk of chunks) {
+            bytes.set(chunk, offset);
+            offset += chunk.byteLength;
+        }
+        return new TextDecoder().decode(bytes);
+    }
+    if (typeof response.text !== "function")
+        throw new Error("response body is unavailable");
+    const text = await response.text();
+    if (typeof text !== "string")
+        throw new Error("response body is invalid");
+    const size = new TextEncoder().encode(text).byteLength;
+    if (!Number.isSafeInteger(size) || size > maxBodyBytes)
+        throw new Error("response body is too large");
+    return text;
+}
+export async function zitadelHttpJsonFetch(http, input, init, options = {}) {
+    const op = "zitadelHttpJsonFetch";
+    if (typeof http !== "function")
+        return createResultError(op, "Zitadel HTTP dependency is invalid");
+    const timeoutMs = options.timeoutMs;
+    const maxBodyBytes = options.maxBodyBytes ?? defaultBodyBytes;
+    if ((timeoutMs !== undefined && (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 120_000)) ||
+        !bodyBytesIsValid(maxBodyBytes) ||
+        (options.signal !== undefined && !(typeof AbortSignal === "function" && options.signal instanceof AbortSignal))) {
+        return createResultError(op, "Zitadel HTTP options are invalid");
+    }
+    if (options.signal?.aborted)
+        return createResultError(op, "Zitadel HTTP request was cancelled");
+    const controller = new AbortController();
+    const onAbort = () => controller.abort();
+    try {
+        options.signal?.addEventListener("abort", onAbort, { once: true });
+    }
+    catch {
+        return createResultError(op, "Zitadel HTTP options are invalid");
+    }
+    const request = Promise.resolve().then(async () => {
+        const response = await http(input, { ...init, signal: controller.signal });
+        if (!responseIsValid(response))
+            throw new Error("Zitadel HTTP response is invalid");
+        if (!response.ok)
+            return { response, body: undefined };
+        const bodyText = await responseBodyRead(response, maxBodyBytes);
+        let body;
+        try {
+            body = JSON.parse(bodyText);
+        }
+        catch {
+            throw new Error("Zitadel HTTP response is not JSON");
+        }
+        return { response, body };
+    });
+    const result = await promiseBoundedRace(request, { timeoutMs, signal: options.signal });
+    try {
+        if (!result.success) {
+            if (result.errorMessage.includes("timed out"))
+                controller.abort();
+            return createResultError(op, result.errorMessage);
+        }
+        return createResult(result.data);
+    }
+    finally {
+        options.signal?.removeEventListener("abort", onAbort);
+        controller.abort();
+    }
+}
+//# sourceMappingURL=zitadelHttpJsonFetch.js.map

package/dist/zitadel/zitadelHttpJsonFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelHttpJsonFetch.js","sourceRoot":"","sources":["../../src/zitadel/zitadelHttpJsonFetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAIrE,MAAM,gBAAgB,GAAG,SAAS,CAAA;AAClC,MAAM,gBAAgB,GAAG,SAAS,CAAA;AAElC,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,gBAAgB,CAAA;AAC5G,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAQ,KAA0B,CAAC,EAAE,KAAK,SAAS,CAAA;AAC3G,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAkB,EAAE,YAAoB;IACpE,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAA;QAC7D,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,EAAE;YAAE,OAAO,IAAI,CAAA;QAC9F,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,OAAO,KAAK,CAAA;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,CAAA;QACpC,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,YAAY,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAkB,EAAE,YAAoB;IACtE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAChG,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;QACxC,MAAM,MAAM,GAAiB,EAAE,CAAA;QAC/B,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBAChC,IAAI,IAAI,CAAC,IAAI;oBAAE,MAAK;gBACpB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,UAAU,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;gBACpF,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAA;gBAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;gBACrG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACzB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,GAAG,YAAY;gBAAE,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACvE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YACxB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;QAC5B,CAAC;QACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACxC,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACxF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACzE,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAA;IACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACrG,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAiB,EACjB,KAAa,EACb,IAAiB,EACjB,UAA8B,EAAE;IAEhC,MAAM,EAAE,GAAG,sBAAsB,CAAA;IACjC,IAAI,OAAO,IAAI,KAAK,UAAU;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;IAClG,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;IACnC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,gBAAgB,CAAA;IAC7D,IACE,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,OAAO,CAAC,CAAC;QACvG,CAAC,gBAAgB,CAAC,YAAY,CAAC;QAC/B,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,YAAY,WAAW,CAAC,CAAC,EAC/G,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAA;IAC/F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;QAC1E,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACnF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;QACtD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;QAC/D,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAA;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACtD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IAC3B,CAAC,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACvF,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAA;YACjE,OAAO,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;QACnD,CAAC;QACD,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACrD,UAAU,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;AACH,CAAC"}

package/dist/zitadel/zitadelIdTokenValidate.d.ts

@@ -0,0 +1,7 @@
+import { type PromiseResult } from "#result";
+import type { Clock } from "../session/Clock.js";
+import type { ZitadelIdentityClaims } from "./ZitadelIdentityClaims.js";
+import type { ZitadelJwks } from "./ZitadelJwks.js";
+import type { ZitadelOidcConfig } from "./ZitadelOidcConfig.js";
+export declare function zitadelIdTokenValidate(idToken: string, config: ZitadelOidcConfig, nonce: string, jwks: ZitadelJwks, clock?: Clock): PromiseResult<ZitadelIdentityClaims>;
+//# sourceMappingURL=zitadelIdTokenValidate.d.ts.map

package/dist/zitadel/zitadelIdTokenValidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelIdTokenValidate.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelIdTokenValidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAI7E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAEvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAkF/D,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EACjB,KAAK,GAAE,KAAgB,GACtB,aAAa,CAAC,qBAAqB,CAAC,CAwGtC"}

package/dist/zitadel/zitadelIdTokenValidate.js

@@ -0,0 +1,170 @@
+import { createResult, createResultError } from "#result";
+import { clockNowResolve } from "../runtime/clockNowResolve.js";
+import { timeMillisecondsValidate } from "../runtime/timeMillisecondsValidate.js";
+import { timeSecondsValidate } from "../runtime/timeSecondsValidate.js";
+import { zitadelConfigValidate } from "./zitadelConfigValidate.js";
+import { zitadelJwksValidate } from "./zitadelJwksValidate.js";
+function base64UrlEncode(bytes) {
+    let binary = "";
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+}
+function base64UrlDecode(value, maximumLength) {
+    if (value.length > maximumLength || !/^[A-Za-z0-9_-]+$/.test(value) || value.length % 4 === 1)
+        return undefined;
+    try {
+        const padded = value.replaceAll("-", "+").replaceAll("_", "/") + "=".repeat((4 - (value.length % 4)) % 4);
+        const binary = atob(padded);
+        const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+        return base64UrlEncode(bytes) === value ? bytes : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function jsonDecode(bytes) {
+    try {
+        return JSON.parse(new TextDecoder().decode(bytes));
+    }
+    catch {
+        return undefined;
+    }
+}
+function signatureAlgorithm(alg) {
+    if (alg === "RS256")
+        return { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" };
+    if (alg === "PS256")
+        return { name: "RSA-PSS", hash: "SHA-256" };
+    if (alg === "ES256")
+        return { name: "ECDSA", namedCurve: "P-256" };
+    return undefined;
+}
+function keyMatchesAlgorithm(key, alg) {
+    if (alg === "RS256" || alg === "PS256")
+        return key.kty === "RSA" && (key.alg === undefined || key.alg === alg);
+    if (alg === "ES256")
+        return key.kty === "EC" && key.crv === "P-256" && (key.alg === undefined || key.alg === alg);
+    return false;
+}
+function keyIdIsValid(value) {
+    if (typeof value !== "string")
+        return false;
+    for (const character of value) {
+        const code = character.charCodeAt(0);
+        if (code <= 0x1f || code === 0x7f)
+            return false;
+    }
+    return value.length > 0 && value.length <= 256 && !/\s/.test(value);
+}
+function claimStringIsValid(value) {
+    return typeof value === "string" && value.length > 0 && value.length <= 256;
+}
+function audienceIsExact(audience, clientId) {
+    if (typeof audience === "string")
+        return audience === clientId;
+    return Array.isArray(audience) && audience.length === 1 && audience[0] === clientId;
+}
+function claimNumberIsValid(value) {
+    return timeSecondsValidate(value);
+}
+export async function zitadelIdTokenValidate(idToken, config, nonce, jwks, clock = Date.now) {
+    const op = "zitadelIdTokenValidate";
+    if (typeof idToken !== "string" ||
+        idToken.length === 0 ||
+        idToken.length > 32_768 ||
+        typeof nonce !== "string" ||
+        nonce.length === 0 ||
+        nonce.length > 256) {
+        return createResultError(op, "identity token is invalid");
+    }
+    const configR = zitadelConfigValidate(config);
+    if (!configR.success)
+        return createResultError(op, "identity token is invalid");
+    const validConfig = configR.data;
+    const jwksR = zitadelJwksValidate(jwks);
+    if (!jwksR.success)
+        return createResultError(op, "identity token is invalid");
+    const parts = idToken.split(".");
+    if (parts.length !== 3)
+        return createResultError(op, "identity token is invalid");
+    const headerBytes = base64UrlDecode(parts[0] ?? "", 4_096);
+    const payloadBytes = base64UrlDecode(parts[1] ?? "", 16_384);
+    const signature = base64UrlDecode(parts[2] ?? "", 4_096);
+    if (headerBytes === undefined || payloadBytes === undefined || signature === undefined) {
+        return createResultError(op, "identity token is invalid");
+    }
+    const header = jsonDecode(headerBytes);
+    const claims = jsonDecode(payloadBytes);
+    if (typeof header !== "object" ||
+        header === null ||
+        Array.isArray(header) ||
+        typeof claims !== "object" ||
+        claims === null ||
+        Array.isArray(claims)) {
+        return createResultError(op, "identity token is invalid");
+    }
+    const headerValues = header;
+    const claimValues = claims;
+    const algorithm = headerValues.alg;
+    const keyId = headerValues.kid;
+    if (typeof algorithm !== "string" || algorithm.length > 16 || !keyIdIsValid(keyId)) {
+        return createResultError(op, "identity token is invalid");
+    }
+    const verificationAlgorithm = signatureAlgorithm(algorithm);
+    if (verificationAlgorithm === undefined)
+        return createResultError(op, "identity token is invalid");
+    const key = jwksR.data.keys.find((entry) => entry.kid === keyId && keyMatchesAlgorithm(entry, algorithm));
+    if (key === undefined)
+        return createResultError(op, "identity token is invalid");
+    let signatureValid = false;
+    try {
+        const verifier = crypto.subtle;
+        const cryptoKey = await verifier.importKey("jwk", key, verificationAlgorithm, false, ["verify"]);
+        const verifyAlgorithm = algorithm === "PS256"
+            ? { name: "RSA-PSS", saltLength: 32 }
+            : algorithm === "ES256"
+                ? { name: "ECDSA", hash: "SHA-256" }
+                : verificationAlgorithm;
+        signatureValid = await verifier.verify(verifyAlgorithm, cryptoKey, signature, new TextEncoder().encode(`${parts[0]}.${parts[1]}`));
+    }
+    catch {
+        return createResultError(op, "identity token is invalid");
+    }
+    if (!signatureValid)
+        return createResultError(op, "identity token is invalid");
+    const nowR = clockNowResolve(clock);
+    if (!nowR.success)
+        return createResultError(op, "identity token claims are invalid");
+    const nowSeconds = Math.floor(nowR.data / 1000);
+    const skewSeconds = validConfig.clockSkewSeconds ?? 0;
+    const nowWithSkew = nowSeconds + skewSeconds;
+    const expiration = claimValues.exp;
+    const issuedAt = claimValues.iat;
+    const notBefore = claimValues.nbf;
+    const expirationWithSkew = typeof expiration === "number" ? expiration + skewSeconds : Number.NaN;
+    const expiresAt = typeof expiration === "number" && timeMillisecondsValidate(expiration * 1000) ? expiration * 1000 : undefined;
+    if (claimValues.iss !== validConfig.issuer ||
+        !audienceIsExact(claimValues.aud, validConfig.clientId) ||
+        !claimStringIsValid(claimValues.sub) ||
+        claimValues.preferred_username === undefined ||
+        !claimStringIsValid(claimValues.preferred_username) ||
+        claimValues.nonce !== nonce ||
+        !claimNumberIsValid(expiration) ||
+        !claimNumberIsValid(issuedAt) ||
+        !timeSecondsValidate(nowWithSkew) ||
+        !timeSecondsValidate(expirationWithSkew) ||
+        expiresAt === undefined ||
+        nowSeconds >= expirationWithSkew ||
+        issuedAt > nowWithSkew ||
+        (claimValues.nbf !== undefined && (!claimNumberIsValid(notBefore) || nowWithSkew < notBefore)) ||
+        (claimValues.azp !== undefined && claimValues.azp !== validConfig.clientId)) {
+        return createResultError(op, "identity token claims are invalid");
+    }
+    return createResult({
+        subject: claimValues.sub,
+        preferredUsername: claimValues.preferred_username,
+        expiresAt,
+    });
+}
+//# sourceMappingURL=zitadelIdTokenValidate.js.map

package/dist/zitadel/zitadelIdTokenValidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelIdTokenValidate.js","sourceRoot":"","sources":["../../src/zitadel/zitadelIdTokenValidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAA;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAMvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAClF,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,aAAqB;IAC3D,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/G,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACzG,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7E,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAY,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAmBD,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IAC1E,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IAChE,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;IAClE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAe,EAAE,GAAW;IACvD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IAC9G,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IACjH,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACpC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAA;AAC7E,CAAC;AAED,SAAS,eAAe,CAAC,QAAiB,EAAE,QAAgB;IAC1D,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,KAAK,QAAQ,CAAA;IAC9D,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAA;AACrF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,MAAyB,EACzB,KAAa,EACb,IAAiB,EACjB,QAAe,IAAI,CAAC,GAAG;IAEvB,MAAM,EAAE,GAAG,wBAAwB,CAAA;IACnC,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,CAAC,MAAM,GAAG,MAAM;QACvB,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,MAAM,GAAG,GAAG,EAClB,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;IAC7C,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAA;IAChC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAA;IACjF,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAA;IAC1D,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAA;IACxD,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACvF,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAA;IACvC,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrB,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,YAAY,GAAG,MAAiC,CAAA;IACtD,MAAM,WAAW,GAAG,MAAiC,CAAA;IACrD,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAA;IAClC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAA;IAC9B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACnF,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAA;IAC3D,IAAI,qBAAqB,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAClG,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,IAAI,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;IACzG,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAChF,IAAI,cAAc,GAAG,KAAK,CAAA;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAsC,CAAA;QAC9D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;QAChG,MAAM,eAAe,GACnB,SAAS,KAAK,OAAO;YACnB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE;YACrC,CAAC,CAAC,SAAS,KAAK,OAAO;gBACrB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;gBACpC,CAAC,CAAC,qBAAqB,CAAA;QAC7B,cAAc,GAAG,MAAM,QAAQ,CAAC,MAAM,CACpC,eAAe,EACf,SAAS,EACT,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CACpD,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAC3D,CAAC;IACD,IAAI,CAAC,cAAc;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAE9E,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,mCAAmC,CAAC,CAAA;IACpF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAC/C,MAAM,WAAW,GAAG,WAAW,CAAC,gBAAgB,IAAI,CAAC,CAAA;IACrD,MAAM,WAAW,GAAG,UAAU,GAAG,WAAW,CAAA;IAC5C,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAA;IAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAA;IAChC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAA;IACjC,MAAM,kBAAkB,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;IACjG,MAAM,SAAS,GACb,OAAO,UAAU,KAAK,QAAQ,IAAI,wBAAwB,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/G,IACE,WAAW,CAAC,GAAG,KAAK,WAAW,CAAC,MAAM;QACtC,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,QAAQ,CAAC;QACvD,CAAC,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAAC;QACpC,WAAW,CAAC,kBAAkB,KAAK,SAAS;QAC5C,CAAC,kBAAkB,CAAC,WAAW,CAAC,kBAAkB,CAAC;QACnD,WAAW,CAAC,KAAK,KAAK,KAAK;QAC3B,CAAC,kBAAkB,CAAC,UAAU,CAAC;QAC/B,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QAC7B,CAAC,mBAAmB,CAAC,WAAW,CAAC;QACjC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC;QACxC,SAAS,KAAK,SAAS;QACvB,UAAU,IAAI,kBAAkB;QAChC,QAAQ,GAAG,WAAW;QACtB,CAAC,WAAW,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,WAAW,GAAG,SAAS,CAAC,CAAC;QAC9F,CAAC,WAAW,CAAC,GAAG,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,KAAK,WAAW,CAAC,QAAQ,CAAC,EAC3E,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,mCAAmC,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,WAAW,CAAC,GAAG;QACxB,iBAAiB,EAAE,WAAW,CAAC,kBAAkB;QACjD,SAAS;KACV,CAAC,CAAA;AACJ,CAAC"}

package/dist/zitadel/zitadelIdentityDirectoryCreate.d.ts

@@ -0,0 +1,5 @@
+import { type Result } from "#result";
+import type { IdentityDirectory } from "../identity/IdentityDirectory.js";
+import type { ZitadelIdentityDirectoryOptions } from "./ZitadelIdentityDirectoryOptions.js";
+export declare function zitadelIdentityDirectoryCreate(options: ZitadelIdentityDirectoryOptions): Result<IdentityDirectory>;
+//# sourceMappingURL=zitadelIdentityDirectoryCreate.d.ts.map

package/dist/zitadel/zitadelIdentityDirectoryCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zitadelIdentityDirectoryCreate.d.ts","sourceRoot":"","sources":["../../src/zitadel/zitadelIdentityDirectoryCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuD,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AAEzE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAA;AAyR3F,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,+BAA+B,GAAG,MAAM,CAAC,iBAAiB,CAAC,CA8BlH"}